- Cyber Resilience Act – Standards to support the standardisation request M/606 (C(2025)618)
Cybersecurity/Network and Information security
Horizontal CRA standards, including PT2 and PT3, are expected to generate lower compliance costs, greater interoperability, and stronger security baselines, driving medium‑ to long‑term economic and technological gains. By providing uniform processes for e.g. secure development, vulnerability handling, and lifecycle management, they reduce fragmentation and simplify conformity assessment for all manufacturers. This creates a predictable market environment, enabling SMEs to self‑assess for many product classes and access the EU Single Market more easily.
The CRA harmonised standards are expected to leverage common terminology, shared threat catalogues, and harmonised requirements, enhancing innovation capacity by lowering integration barriers and fostering cross‑sector reuse of security components. Overall, PT2 and PT3 help strengthen EU digital autonomy, reduce risks, and empower SMEs with clearer, cheaper, and more interoperable pathways to compliance.
- New standard development
-
With this fellowship, I contribute to the development of new standards to support the standardisation request M/606 (C(2025)618). The focus is especially on the horizontal CRA standards, including PT2 and PT3 that are developped within CEN/CENELEC JTC 13/ WG9 - Horizontal cybersecurity for products with digital elements. Also, during this fellowship, I was approved as the convenor of the recently created WG – CEN/CENELEC JTC19 / WG 4 - Blockchain and Distributed Ledger Technologies for Cybersecurity and Resilience.
